Zero Trust Authentication

Zero Trust Authentication

News: In response to the increasing threat of cyberattacks, the Indian government has established a secure e-mail system for 10,000 users in critical ministries and departments.
• The e-mail system operates on Zero Trust Authentication (ZTA) and has been developed by the National Informatics Centre (NIC).

What is ZTA?
• Zero Trust Authentication is a security concept that is part of the broader Zero Trust framework. It operates on the principle of 'never trust, always verify'
• In Zero Trust Authentication, every request is treated as if it originated from an untrusted network, regardless of where the request originates or what resource it accesses. This means that each service verifies that requests it receives are sent from an authenticated source. Services maintain internal access control lists that detail which other services or users are allowed to access them.
• Zero Trust Authentication also requires consideration of encryption of data, securing email, and verifying the hygiene of assets and endpoints before they connect to applications. It is designed to adapt to the complexities of the modern environment that embraces the mobile workforce, protects people, devices, applications, and data wherever they are located.
• It’s important to note that Zero Trust is not a product or a service, but an approach in designing and implementing a set of security principles